General
-
Target
February Order.exe
-
Size
973KB
-
Sample
210118-sswm13h3xa
-
MD5
5ca7336524c9c0bc899fb3a9b3c9a5d8
-
SHA1
83e2fa92a7ac8f3f1950af7fd9f439bfb6353593
-
SHA256
011e18466a15d6a18399caac2f3317b86ae944699f0ef8b332e9995b47767a6f
-
SHA512
9ebad8871ddd213982dd197a10bc0d352dd659eec743ca1ec3a060ee7aefb96927a728aeb6a9f53db3efeec6bc8156bc4971ff1043aebce104e80ad51d65ef6c
Static task
static1
Behavioral task
behavioral1
Sample
February Order.exe
Resource
win7v20201028
Malware Config
Extracted
formbook
http://www.tokomw.com/wt8z/
blerdofmouth.com
talkheavy33.com
beautynewsreport.com
ashihun83.icu
fexkehv.icu
athe3bina.online
qkshu5.com
legendsfxmarketsreview.com
irisalerts.com
valkings.com
fullyplanted.com
jackmiramusic.com
stationcamphockey.com
ahlfb.com
detailsmatterinc.com
allenkohler.com
artefactoshop.com
quefarra.com
preloved.mobi
queenstyle.salon
mafheb.com
desdetv.net
xuongkhopchinhhang.xyz
coastalexpedited.com
moddevice.com
advancedriskservs.com
ovalprime.com
rediscovercacao.com
punjabidiner.com
psm-gen.com
disciplineandme.com
580-homes.com
chriswituik.com
mac-compost.com
officinadellapappa.com
eastlosrealestate.com
violethousing.com
bitzoptions.com
rmv-plexus.com
sound-virus.com
rollingrevenueroadmap.com
moknowstexting.com
soulseatedbooks.com
lapelfinehomes.com
tabakashi.com
idlatch.com
ifixcom.com
laut.xyz
lesionado911.com
australianonlinepharmacy.com
bornkidocare.com
pornoportail.com
playrighthomeschoolgroup.com
gotroasted.online
setoffiiceup.com
jerseydroneworks.com
shes-eco.com
wrinkledlady.com
kalpari.com
crexii.com
xn--el3bu3in8emoh.com
12257.xyz
digitalbank.center
chadsiphonerepair.com
Targets
-
-
Target
February Order.exe
-
Size
973KB
-
MD5
5ca7336524c9c0bc899fb3a9b3c9a5d8
-
SHA1
83e2fa92a7ac8f3f1950af7fd9f439bfb6353593
-
SHA256
011e18466a15d6a18399caac2f3317b86ae944699f0ef8b332e9995b47767a6f
-
SHA512
9ebad8871ddd213982dd197a10bc0d352dd659eec743ca1ec3a060ee7aefb96927a728aeb6a9f53db3efeec6bc8156bc4971ff1043aebce104e80ad51d65ef6c
-
Formbook Payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-